mirror of
https://github.com/pocket-id/pocket-id.git
synced 2026-05-13 08:29:53 +00:00
91 lines
2.9 KiB
Go
91 lines
2.9 KiB
Go
package dto
|
|
|
|
import (
|
|
"regexp"
|
|
"time"
|
|
|
|
"github.com/pocket-id/pocket-id/backend/internal/utils"
|
|
|
|
"github.com/gin-gonic/gin/binding"
|
|
"github.com/go-playground/validator/v10"
|
|
)
|
|
|
|
// [a-zA-Z0-9] : The username must start with an alphanumeric character
|
|
// [a-zA-Z0-9_.@-]* : The rest of the username can contain alphanumeric characters, dots, underscores, hyphens, and "@" symbols
|
|
// [a-zA-Z0-9]$ : The username must end with an alphanumeric character
|
|
var validateUsernameRegex = regexp.MustCompile("^[a-zA-Z0-9][a-zA-Z0-9_.@-]*[a-zA-Z0-9]$")
|
|
|
|
var validateClientIDRegex = regexp.MustCompile("^[a-zA-Z0-9._-]+$")
|
|
|
|
func init() {
|
|
v := binding.Validator.Engine().(*validator.Validate)
|
|
|
|
// Maximum allowed value for TTLs
|
|
const maxTTL = 31 * 24 * time.Hour
|
|
|
|
if err := v.RegisterValidation("username", func(fl validator.FieldLevel) bool {
|
|
return ValidateUsername(fl.Field().String())
|
|
}); err != nil {
|
|
panic("Failed to register custom validation for username: " + err.Error())
|
|
}
|
|
|
|
if err := v.RegisterValidation("client_id", func(fl validator.FieldLevel) bool {
|
|
return ValidateClientID(fl.Field().String())
|
|
}); err != nil {
|
|
panic("Failed to register custom validation for client_id: " + err.Error())
|
|
}
|
|
|
|
if err := v.RegisterValidation("ttl", func(fl validator.FieldLevel) bool {
|
|
ttl, ok := fl.Field().Interface().(utils.JSONDuration)
|
|
if !ok {
|
|
return false
|
|
}
|
|
// Allow zero, which means the field wasn't set
|
|
return ttl.Duration == 0 || (ttl.Duration > time.Second && ttl.Duration <= maxTTL)
|
|
}); err != nil {
|
|
panic("Failed to register custom validation for ttl: " + err.Error())
|
|
}
|
|
|
|
if err := v.RegisterValidation("callback_url", func(fl validator.FieldLevel) bool {
|
|
return ValidateCallbackURL(fl.Field().String())
|
|
}); err != nil {
|
|
panic("Failed to register custom validation for callback_url: " + err.Error())
|
|
}
|
|
|
|
if err := v.RegisterValidation("response_mode", func(fl validator.FieldLevel) bool {
|
|
return ValidateResponseMode(fl.Field().String())
|
|
}); err != nil {
|
|
panic("Failed to register custom validation for response_mode: " + err.Error())
|
|
}
|
|
}
|
|
|
|
// ValidateUsername validates username inputs
|
|
func ValidateUsername(username string) bool {
|
|
return validateUsernameRegex.MatchString(username)
|
|
}
|
|
|
|
// ValidateClientID validates client ID inputs
|
|
func ValidateClientID(clientID string) bool {
|
|
return validateClientIDRegex.MatchString(clientID)
|
|
}
|
|
|
|
// ValidateCallbackURL validates callback URLs with support for wildcards
|
|
func ValidateCallbackURL(raw string) bool {
|
|
err := utils.ValidateCallbackURLPattern(raw)
|
|
return err == nil
|
|
}
|
|
|
|
// ValidateResponseMode validates response_mode parameter
|
|
// If responseMode is present, it must be "form_post"
|
|
// Empty responseMode is allowed (will use default behavior)
|
|
func ValidateResponseMode(responseMode string) bool {
|
|
switch responseMode {
|
|
case "form_post":
|
|
return true
|
|
case "":
|
|
// Empty responseMode is allowed (field not provided, use default)
|
|
return true
|
|
default:
|
|
return false
|
|
}
|
|
} |